A vulnerability classified as problematic has been found in Ultimate Addons for Elementor Plugin up to 2.4.6 on WordPress. This affects the function save_hfe_compatibility_option_callback of the component Setting Handler. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2025-8488. It is possible to initiate the attack remotely. There is no exploit available.